Medium severity · published Dec 5, 2022
CVE-2022-43557
The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.
CVSS vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack vector
Physical
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
B1
Bodyguard 121 Twins Firmware · BD
All versions, or not specified · source: NVD
B3
Bodyguard 323 Colorvision Firmware · BD
All versions, or not specified · source: NVD
B9
Bodyguard 999-603 Firmware · BD
All versions, or not specified · source: NVD
BD
Bodyguard Duo 999-903 Firmware · BD
All versions, or not specified · source: NVD
BE
Bodyguard Epidural 999-683 Firmware · BD
All versions, or not specified · source: NVD
BP
Bodyguard Pain Manager 999-803 Firmware · BD
All versions, or not specified · source: NVD
BT
Bodyguard T 999-103 Firmware · BD
All versions, or not specified · source: NVD